
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft
File: 4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft (raw, json)
Hash identifier: ikpEYQOmg7TDEyce4RdG1qVfka6IzwXrKMNS+ZC0fII=
Subject key identifier: AE:DB:01:0B:6A:22:D2:75:F9:12:2A:13:0A:43:3D:D1:48:BA:80:81
Authority key identifier: E0:8A:C5:50:0E:1F:F1:8F:D5:D5:2B:79:7C:50:97:DD:0A:B9:4B:E5
Certificate issuer: /CN=A91A622F/serialNumber=E08AC5500E1FF18FD5D52B797C5097DD0AB94BE5
Certificate serial: 27FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft
Manifest number: 279B
Signing time: Thu 16 Apr 2026 15:37:40 +0000
Manifest this update: Thu 16 Apr 2026 15:37:39 +0000
Manifest next update: Thu 23 Apr 2026 15:37:39 +0000
Files and hashes: 1: 4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl (hash: MkQG4cXx4TkOSU2+rIkioNh8KH9BfXXhCwPWT32N6Z0=)
2: BCAE5314F75C11EB95BE8C87C4F9AE02.roa (hash: 8d/EsyvXZ0sZ4UIJJOhDUVw09qD8ry/nM19Udtp/aCs=)
3: 54F4ED62A4D511EA863BC00AC4F9AE02.roa (hash: m8LjRReURkNYQlFbq8Oxyk7Q/R4DlXQJo+P+UmQjlpk=)
4: 253C821A388611ECBE8F7725C4F9AE02.roa (hash: W4I7YPOuWVvwmHp1ZJLPAJvoqNMOXVHgJ7mR8552CZw=)
5: 79393030926D11F0B792FC45C4F9AE02.roa (hash: xTWQ2YY51Yjv1sC0QX+NsLpLvl8JaZ7NwJLpiNVnw2Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl
rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 15:37:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10234 (0x27fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A622F, serialNumber=E08AC5500E1FF18FD5D52B797C5097DD0AB94BE5
Validity
Not Before: Apr 16 15:37:39 2026 GMT
Not After : Apr 23 15:37:39 2026 GMT
Subject: CN=69e10244-0d75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:05:9a:fa:2b:23:3b:1b:22:d7:97:8c:93:03:
db:38:46:b6:15:c1:e6:9f:12:a3:3d:e4:c2:c1:5f:
a6:c7:a8:85:74:43:be:2e:89:96:66:d3:34:9c:17:
da:56:ed:47:8c:d2:6a:f5:a6:bd:ac:d6:7a:b2:0d:
35:3b:3b:4d:13:d9:45:c1:a7:1d:fd:1d:52:a4:56:
28:f1:dd:17:fe:89:17:cf:b2:ed:dd:8d:df:3c:63:
82:f5:da:97:29:e6:64:06:6c:c1:59:d8:6a:fe:a1:
81:4e:38:64:23:9c:b2:0e:7d:99:15:86:8a:41:9b:
86:d3:e4:31:25:8a:fa:73:31:26:ca:16:d8:90:15:
70:68:1c:67:70:1b:91:c8:8e:d7:04:7b:f1:bb:6f:
d2:e7:e4:b6:c7:55:7d:76:8b:f3:d3:3e:84:b6:92:
ef:63:99:e3:59:20:38:29:5d:30:f5:2c:41:95:07:
08:16:07:a5:3a:8a:7f:78:cf:70:d3:54:d2:a4:33:
b2:bc:9a:e1:53:a7:3b:f8:11:d3:37:f8:37:1f:0c:
b5:fa:63:34:98:ed:7e:2c:d9:c4:e5:b1:c7:6e:e9:
8a:00:8d:72:e9:85:96:94:19:e0:a4:da:52:16:72:
b2:a6:29:31:b4:b5:6a:ae:6e:45:40:85:56:d1:c9:
01:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:DB:01:0B:6A:22:D2:75:F9:12:2A:13:0A:43:3D:D1:48:BA:80:81
X509v3 Authority Key Identifier:
keyid:E0:8A:C5:50:0E:1F:F1:8F:D5:D5:2B:79:7C:50:97:DD:0A:B9:4B:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:50:8d:e8:fd:8e:76:58:d9:a0:22:ae:a1:83:b3:92:ef:0a:
da:b8:1d:b6:77:61:2d:4e:2a:cf:96:be:72:0c:5c:fc:39:7f:
2d:f3:8b:69:da:f5:8f:49:52:24:48:e8:a8:6b:b7:87:b7:c5:
19:21:1f:6b:b3:be:0b:87:d4:b5:d7:59:e6:af:0c:03:5f:0e:
dc:b7:ce:7d:cb:ad:93:69:92:a5:e2:0a:4f:5e:20:e5:f6:cf:
85:e2:ec:63:8f:de:96:cf:d6:b2:6a:fb:de:d4:62:39:0c:41:
67:a8:57:b5:2a:de:4d:3a:7d:f6:0f:88:d5:7d:4f:cd:88:cc:
6b:ab:b1:43:67:18:cc:0c:20:f8:dc:2f:ad:2d:cc:1b:b7:d9:
ee:d2:1d:20:06:35:af:52:d1:1c:10:a0:bb:ab:c0:05:0b:3c:
2b:e9:88:53:99:93:d5:aa:4d:0e:e1:1b:b9:bd:c1:26:23:6d:
9f:88:01:45:f0:0b:50:0f:ee:d9:2a:cc:14:3c:ef:56:7a:92:
65:78:56:11:77:c9:da:2e:70:96:b2:be:98:45:bd:e8:dd:9b:
ce:a3:98:b9:25:70:0e:4d:4e:07:d1:ca:78:08:b3:38:66:0f:
e5:48:7a:63:1f:e0:04:6a:44:a9:df:b1:19:3e:44:53:af:0b:
af:d4:6a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:05:36 2026 by rpki-client